The tools we work with

Mobile and computer forensics

• Oxygen Forensics
• Autopsy
• The Sleuth Kit
• X-Ways Forensics
• FTK
• KAPE
• Digital Intelligence

Tools of this kind acquire data from phones, laptops and storage media, then help an examiner search it: file systems, messages, browser history, timelines and recoverable remnants. An acquisition is checked against its hash value so the copy can be shown to match the source.

Our work relies on validated tools, including Oxygen Forensics and our own in-house tools.

Memory and malware

• Volatility
• Ghidra
• YARA

A computer’s working memory holds running programs, open connections and fragments that never reach the disk. Memory tools read a captured copy of it. Reverse-engineering software lets an examiner study what a suspicious program does, and pattern rules help spot known malicious code across many files.

Network and incident response

• Wireshark
• Zeek
• Velociraptor
• MISP
• Sigma
• MITRE ATT&CK

After a suspected intrusion, the questions are usually what happened, when, and whether it is still happening. These tools capture and read network traffic, collect evidence from many machines at once, share threat indicators, express detection logic, and map attacker behaviour onto a common framework of known techniques.

Investigations, passwords and media

• Maltego
• Passware
• Hashcat
• Amped FIVE

Link-analysis software turns public information about people, companies and online accounts into a picture of connections that an analyst then checks. Password-recovery tools can open protected files and devices where the law and the instructions allow it. Image and video software clarifies footage while keeping a record of each processing step.

Platforms and AI

• Python
• Linux
• Microsoft
• OpenAI
• Anthropic

Operating systems and a scripting language underpin much of the daily work, from automating repetitive checks to parsing unusual file formats. AI services can help with drafting and with sorting large volumes of non-sensitive material.

All product names and trademarks remain the property of their owners. A name on this page tells you we use that tool; it is not a claim of partnership or endorsement. AI tools are never used on client evidence without the client’s consent.

Questions